Critical severity · published Jun 18, 2024
CVE-2024-6114
A vulnerability classified as critical has been found in itsourcecode Monbela Tourist Inn Online Reservation System up to 1.0
9.8
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability classified as critical has been found in itsourcecode Monbela Tourist Inn Online Reservation System up to 1.0. Affected is an unknown function of the file controller.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-268866 is the identifier assigned to this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MT
Monbela Tourist Inn Online Reservation System · Janobe
1.0 · source: NVD
Affected product
MT
Monbela Tourist Inn Online Reservation System
Janobe
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-6114
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-6114
Exploit
https://github.com/wangyuan-ui/CVE/issues/4
Permissions Required
https://vuldb.com/?ctiid.268866
Third Party Advisory
https://vuldb.com/?id.268866
Third Party Advisory
https://vuldb.com/?submit.358995
More from Monbela Tourist Inn Online Reservation System
9.8
CVE-2024-6113
A vulnerability was found in itsourcecode Monbela Tourist Inn Online Reservation System 1.0